Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D507DF5060B22CF2B1E590338AF7A4C9C7A1A6F7.cer
File:                     D507DF5060B22CF2B1E590338AF7A4C9C7A1A6F7.cer (raw, json)
Hash identifier:          jUWVCnJgL0sduJWRbjrGM4Ndp4nuR78NDJ6SshICZI4=
Subject key identifier:   D5:07:DF:50:60:B2:2C:F2:B1:E5:90:33:8A:F7:A4:C9:C7:A1:A6:F7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3C9EE87C52E2EA87030449DE0F3F349A907D14A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/1/D507DF5060B22CF2B1E590338AF7A4C9C7A1A6F7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 12:38:35 +0000
Certificate not after:    Thu 03 Apr 2025 12:43:35 +0000
Subordinate resources:    AS: 271582
                          IP: 45.165.180.0/22
                          IP: 2804:7dc8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 06:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9e:e8:7c:52:e2:ea:87:03:04:49:de:0f:3f:34:9a:90:7d:14:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 12:38:35 2024 GMT
            Not After : Apr  3 12:43:35 2025 GMT
        Subject: CN=D507DF5060B22CF2B1E590338AF7A4C9C7A1A6F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6e:f3:ad:ca:36:c1:bf:18:42:ca:13:56:a7:
                    16:d6:fd:02:7c:69:08:97:6b:ea:b3:10:f1:80:2e:
                    95:d8:91:b1:ec:9a:56:7b:59:71:f8:8a:6c:30:db:
                    ad:f6:dd:07:cd:1d:82:25:fc:a0:29:fb:b8:30:bc:
                    54:6a:26:3f:49:f7:cb:af:1b:cb:a1:81:d9:71:92:
                    43:f9:a0:67:e0:62:01:30:8c:51:46:a0:f7:ae:2c:
                    6a:46:f7:27:24:2e:63:41:67:56:69:d6:44:fd:77:
                    2f:3f:7c:a1:38:4a:17:6b:59:df:f8:b8:76:e7:46:
                    18:52:f9:a4:ba:ca:ee:48:a7:2d:2e:96:36:f9:97:
                    4e:43:47:aa:3f:07:fa:4b:03:75:2f:cb:38:3e:4b:
                    07:f6:1a:ce:ad:32:77:07:01:d8:b7:13:09:73:71:
                    43:66:9f:ec:7e:d6:c2:53:22:4a:f8:b7:63:be:10:
                    a6:c2:67:3a:3e:c8:b0:c6:05:5e:c3:e1:1f:00:87:
                    c8:df:b8:77:32:b3:00:f4:50:27:ea:2c:95:9d:70:
                    bf:56:98:28:8c:e1:09:63:b2:35:ba:63:3d:e0:7d:
                    3e:3d:00:57:c0:ac:64:ed:80:a5:14:42:1d:03:7b:
                    6f:cd:26:54:77:17:31:07:a2:f9:d7:f7:8c:0e:ac:
                    63:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:07:DF:50:60:B2:2C:F2:B1:E5:90:33:8A:F7:A4:C9:C7:A1:A6:F7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/1/D507DF5060B22CF2B1E590338AF7A4C9C7A1A6F7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.180.0/22
                IPv6:
                  2804:7dc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271582

    Signature Algorithm: sha256WithRSAEncryption
         80:31:8b:66:80:70:d0:99:57:a7:ca:2e:9a:01:8f:9f:bc:2d:
         21:89:68:87:1f:af:c6:e6:2e:bc:c7:6a:1c:04:a2:fd:60:a3:
         30:a8:6d:6f:a1:5d:1d:0d:58:32:58:5e:d1:f4:35:2e:6a:6c:
         c7:67:dd:62:43:3c:51:39:ad:da:cc:c4:51:2d:d5:3a:36:2d:
         16:a0:07:ec:bb:22:2e:b4:b4:29:7a:63:8e:e2:1c:f8:09:00:
         75:3f:56:4b:31:a2:1d:e2:eb:43:39:37:66:7f:40:a5:0a:05:
         a7:45:89:51:14:cc:1e:ca:cd:62:69:d0:44:6e:95:2f:28:d7:
         47:6d:87:d7:25:5f:21:1b:83:93:0c:d2:e5:82:40:01:e4:95:
         c9:c4:d3:0c:12:5e:5f:ce:a6:48:74:dd:2e:4d:f6:6e:9a:1f:
         ed:b8:18:87:76:ee:a7:d0:0d:dd:a2:67:29:a7:49:2b:69:b7:
         72:e2:cd:52:db:50:f9:61:09:a6:53:7f:62:74:ed:2d:8f:28:
         5b:33:47:a1:d5:26:5d:fe:dc:36:57:69:1f:ea:6a:8d:2e:f0:
         fb:13:82:9f:61:f3:66:ea:03:41:a8:01:08:ea:1e:65:4c:d0:
         ec:b7:ec:1d:b7:eb:55:1d:25:31:83:bf:2c:ef:69:f2:43:a8:
         5d:10:d1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:18:10 2024 by rpki-client on console-fra.rpki-client.org